/create-authorization-grant validations

[Jeff Lee]

• Return an error if the requested policy is not in the list of possible polices
• Return an error if the guard type is invalid
• Return an error if the guard data for access_token guards contains anything other than id